...NSA can be placed in front of a SonicWALL Aventail appliance to provide both firewall and UTM capabilities. Using the securityzone capabilities of the NSA (which is a logical method of grouping one or more firewall interfaces), all VPN traffic...
http://www.sonicwall.com/downloads/Aventail_Clean_VPN_whitepaper.pdf